trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter).

Published Apr 14, 2017 · Updated Sep 17, 2024 · Assigned by mitre